Config #7765
closedsecurity.txt missing on mentat-hub
0%
Description
The security.txt is available on mentat-alt, at https://mentat-alt.cesnet.cz/.well-known/security.txt , but not on mentat-hub (and possibly others). This should probably be deployed through ansible.
Updated by Rajmund Hruška 3 months ago
- Category set to Installation
- Status changed from New to In Progress
- Assignee set to Rajmund Hruška
- Target version changed from Backlog to 2.13.1
Updated by Rajmund Hruška 3 months ago
In the related RFC it is stated that the document must contain "Expires". The security.txt on mentat-alt doesn't have this entry. Do we want to add it now? If so, do we also want to do some check to check the date?
Updated by Radko Krkoš 3 months ago
Rajmund Hruška wrote in #note-2:
In the related RFC it is stated that the document must contain "Expires". The security.txt on mentat-alt doesn't have this entry. Do we want to add it now? If so, do we also want to do some check to check the date?
Yes, we should make this as conformant as reasonably possible. Also, unified for all web servers if possible (a general ansible role comes in mind). In the near future, auror will be able to help with 'security.txt' detection and validation.
Updated by Rajmund Hruška 3 months ago
- Status changed from In Progress to Resolved
- To be discussed changed from Yes to No
Updated by Rajmund Hruška 3 months ago
- Status changed from Resolved to In Review